Microsoft update

KB5031354

Security Update

View on Microsoft →

Fixed in

Windows 11 Version 22H2 for ARM64-based Systems 10.0.22621.2428
Windows 11 Version 22H2 for x64-based Systems 10.0.22621.2428

Fixes 74 records

TI-2023-18397 CVE-2023-36563 · GHSA-gp6r-cxxr-fc5f

Microsoft WordPad Information Disclosure Vulnerability

CRITICAL 88KEV

Microsoft WordPad Information Disclosure Vulnerability

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.20318 Published 2023-10-10 Fixed in 10.0.17763.4974, 10.0.20348.2031 +10 CWE-20

TI-2023-18417 CVE-2023-36584 · GHSA-frhq-jq5j-7w9c

Windows Mark of the Web Security Feature Bypass Vulnerability

HIGH 84KEV

Windows Mark of the Web Security Feature Bypass Vulnerability

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.03251 Published 2023-10-10 Fixed in 10.0.17763.4974, 10.0.20348.2031 +10

TI-2023-19588 CVE-2023-38171 · GHSA-xh5m-8qqp-c5x7

Microsoft QUIC Denial of Service Vulnerability

HIGH 76

Microsoft QUIC Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.71046 Published 2023-10-10 Fixed in 17.2.21, 17.4.13 +8 CWE-476

TI-2023-18430 CVE-2023-36606 · GHSA-wh38-jq3r-39hr

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

HIGH 76

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.69361 Published 2023-10-10 Fixed in 10.0.17763.4974, 10.0.20348.2031 +10 CWE-400

TI-2023-17688 CVE-2023-35349 · GHSA-3qv5-8wgg-g4c6

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

MEDIUM 54

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02886 Published 2023-10-10 Fixed in 10.0.17763.4974, 10.0.20348.2031 +10 CWE-20

TI-2023-22177 CVE-2023-41772 · GHSA-cch3-mcjx-jmcr

Win32k Elevation of Privilege Vulnerability

MEDIUM 49

Win32k Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.13314 Published 2023-10-10 Fixed in 10.0.17763.4974, 10.0.20348.2031 +4 CWE-284

TI-2023-18292 CVE-2023-36435 · GHSA-fr44-546p-7xcp

Microsoft QUIC Denial of Service Vulnerability

MEDIUM 47

Microsoft QUIC Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.05718 Published 2023-10-10 Fixed in 7.3.9, 10.0.20348.2031 +4 CWE-400

TI-2023-18291 CVE-2023-36434 · GHSA-jgcx-mx3w-x54f

Windows IIS Server Elevation of Privilege Vulnerability

MEDIUM 46

Windows IIS Server Elevation of Privilege Vulnerability

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02274 Published 2023-10-10 Fixed in 10.0.19045.3570, 10.0.22621.2428 +10 CWE-307

TI-2023-18424 CVE-2023-36594 · GHSA-h4pg-m697-86cr

Windows Graphics Component Elevation of Privilege Vulnerability

MEDIUM 45

Windows Graphics Component Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.08001 Published 2023-10-10 Fixed in 10.0.17763.4974, 10.0.20348.2031 +10 CWE-843

TI-2023-18540 CVE-2023-36731 · GHSA-6p3p-8mc6-973v

Win32k Elevation of Privilege Vulnerability

MEDIUM 44

Win32k Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.06622 Published 2023-10-10 Fixed in 10.0.17763.4974, 10.0.20348.2031 +10 CWE-20

TI-2023-18529 CVE-2023-36720 · GHSA-v79g-4x8j-mjvr

Windows Mixed Reality Developer Tools Denial of Service Vulnerability

MEDIUM 44

Windows Mixed Reality Developer Tools Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02521 Published 2023-10-10 Fixed in 10.0.17763.4974, 10.0.20348.2031 +5

TI-2023-18521 CVE-2023-36709 · GHSA-j4cf-7mc7-2299

Microsoft AllJoyn API Denial of Service Vulnerability

MEDIUM 44

Microsoft AllJoyn API Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02678 Published 2023-10-10 Fixed in 10.0.17763.4974, 10.0.20348.2031 +6 CWE-476

TI-2023-18428 CVE-2023-36603 · GHSA-95w3-gxxh-3g77

Windows TCP/IP Denial of Service Vulnerability

MEDIUM 44

Windows TCP/IP Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02482 Published 2023-10-10 Fixed in 10.0.17763.4974, 10.0.20348.2031 +4 CWE-476

TI-2023-18427 CVE-2023-36602 · GHSA-fvv9-2jpm-h3rr

Windows TCP/IP Denial of Service Vulnerability

MEDIUM 44

Windows TCP/IP Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02482 Published 2023-10-10 Fixed in 10.0.17763.4974, 10.0.20348.2031 +10 CWE-476

TI-2023-18414 CVE-2023-36581 · GHSA-244w-39h6-2f5r

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

MEDIUM 44

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02483 Published 2023-10-10 Fixed in 10.0.17763.4974, 10.0.20348.2031 +10 CWE-126

TI-2023-18413 CVE-2023-36579 · GHSA-wh6f-p9hp-fpwj

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

MEDIUM 44

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02483 Published 2023-10-10 Fixed in 10.0.17763.4974, 10.0.20348.2031 +10 CWE-400

TI-2023-18411 CVE-2023-36577 · GHSA-5j29-6cpw-mcc3

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

MEDIUM 44

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01773 Published 2023-10-10 Fixed in 10.0.17763.4974, 10.0.20348.2031 +10 CWE-122

TI-2023-18289 CVE-2023-36431 · GHSA-4gqw-x6ww-pxrr

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

MEDIUM 44

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02483 Published 2023-10-10 Fixed in 10.0.17763.4974, 10.0.20348.2031 +10 CWE-400

TI-2023-18425 CVE-2023-36596 · GHSA-54fp-2g66-5c89

Remote Procedure Call Information Disclosure Vulnerability

MEDIUM 43

Remote Procedure Call Information Disclosure Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02113 Published 2023-10-10 Fixed in 10.0.17763.4974, 10.0.20348.2031 +8 CWE-822

TI-2023-18401 CVE-2023-36567 · GHSA-q586-vvpv-cj23

Windows Deployment Services Information Disclosure Vulnerability

MEDIUM 43

Windows Deployment Services Information Disclosure Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02081 Published 2023-10-10 Fixed in 10.0.17763.4974, 10.0.20348.2031 +10 CWE-908

TI-2023-18295 CVE-2023-36438 · GHSA-5m5h-6gvp-jr2f

Windows TCP/IP Information Disclosure Vulnerability

MEDIUM 43

Windows TCP/IP Information Disclosure Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02027 Published 2023-10-10 Fixed in 10.0.17763.4974, 10.0.20348.2031 +10

TI-2023-18512 CVE-2023-36697 · GHSA-j4jr-x49m-p2hp

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

MEDIUM 41

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.02197 Published 2023-10-10 Fixed in 10.0.17763.4974, 10.0.20348.2031 +10 CWE-20

TI-2023-22179 CVE-2023-41774 · GHSA-9hq3-7chc-xff2

Layer 2 Tunneling Protocol Remote Code Execution Vulnerability

MEDIUM 40

Layer 2 Tunneling Protocol Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.01306 Published 2023-10-10 Fixed in 10.0.17763.4974, 10.0.20348.2031 +10 CWE-416

TI-2023-22178 CVE-2023-41773 · GHSA-x5g4-5r6g-2v75

Layer 2 Tunneling Protocol Remote Code Execution Vulnerability

MEDIUM 40

Layer 2 Tunneling Protocol Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.01306 Published 2023-10-10 Fixed in 10.0.17763.4974, 10.0.20348.2031 +10 CWE-416

TI-2023-22176 CVE-2023-41771 · GHSA-fcwr-mx87-mcf2

Layer 2 Tunneling Protocol Remote Code Execution Vulnerability

MEDIUM 40

Layer 2 Tunneling Protocol Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.01302 Published 2023-10-10 Fixed in 10.0.17763.4974, 10.0.20348.2031 +10 CWE-416

TI-2023-22175 CVE-2023-41770 · GHSA-6jcp-96px-ch37

Layer 2 Tunneling Protocol Remote Code Execution Vulnerability

MEDIUM 40

Layer 2 Tunneling Protocol Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.01302 Published 2023-10-10 Fixed in 10.0.17763.4974, 10.0.20348.2031 +10 CWE-416

TI-2023-22174 CVE-2023-41769 · GHSA-r928-44jm-2rqp

Layer 2 Tunneling Protocol Remote Code Execution Vulnerability

MEDIUM 40

Layer 2 Tunneling Protocol Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.01302 Published 2023-10-10 Fixed in 10.0.17763.4974, 10.0.20348.2031 +10 CWE-416

TI-2023-22173 CVE-2023-41768 · GHSA-v8r4-r5f4-jp7j

Layer 2 Tunneling Protocol Remote Code Execution Vulnerability

MEDIUM 40

Layer 2 Tunneling Protocol Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.01302 Published 2023-10-10 Fixed in 10.0.17763.4974, 10.0.20348.2031 +10 CWE-416

TI-2023-22172 CVE-2023-41767 · GHSA-mmjf-wxcw-v9fp

Layer 2 Tunneling Protocol Remote Code Execution Vulnerability

MEDIUM 40

Layer 2 Tunneling Protocol Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.01302 Published 2023-10-10 Fixed in 10.0.17763.4974, 10.0.20348.2031 +10 CWE-416

TI-2023-22170 CVE-2023-41765 · GHSA-fr45-3pq8-cqp4

Layer 2 Tunneling Protocol Remote Code Execution Vulnerability

MEDIUM 40

Layer 2 Tunneling Protocol Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.01302 Published 2023-10-10 Fixed in 10.0.17763.4974, 10.0.20348.2031 +10 CWE-416

TI-2023-19584 CVE-2023-38166 · GHSA-3g9v-h3h6-7qf4

Layer 2 Tunneling Protocol Remote Code Execution Vulnerability

MEDIUM 40

Layer 2 Tunneling Protocol Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.01302 Published 2023-10-10 Fixed in 10.0.17763.4974, 10.0.20348.2031 +10 CWE-416

TI-2023-18549 CVE-2023-36743 · GHSA-5845-35rx-r9pr

Win32k Elevation of Privilege Vulnerability

MEDIUM 40

Win32k Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.03633 Published 2023-10-10 Fixed in 10.0.17763.4974, 10.0.20348.2031 +10 CWE-416

TI-2023-18527 CVE-2023-36718 · GHSA-rcw5-8jm2-j9f9

Microsoft Virtual Trusted Platform Module Remote Code Execution Vulnerability

LOW 39

Microsoft Virtual Trusted Platform Module Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01327 Published 2023-10-10 Fixed in 10.0.17763.4974, 10.0.20348.2031 +6 CWE-94

TI-2023-19578 CVE-2023-38159 · GHSA-3mc9-3c2c-xqg4

Windows Graphics Component Elevation of Privilege Vulnerability

LOW 38

Windows Graphics Component Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.04056 Published 2023-10-10 Fixed in 10.0.17763.4974, 10.0.20348.2031 +6 CWE-591

TI-2023-18532 CVE-2023-36723 · GHSA-p95c-gfqf-9gph

Windows Container Manager Service Elevation of Privilege Vulnerability

LOW 38

Windows Container Manager Service Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01959 Published 2023-10-10 Fixed in 10.0.17763.4974, 10.0.20348.2031 +4 CWE-59

TI-2023-18522 CVE-2023-36710 · GHSA-5688-p8vm-h8r5

Windows Media Foundation Core Remote Code Execution Vulnerability

LOW 38

Windows Media Foundation Core Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00927 Published 2023-10-10 Fixed in 10.0.17763.4974, 10.0.20348.2031 +9 CWE-197

TI-2023-18515 CVE-2023-36702 · GHSA-m5gc-mv42-7hx5

Microsoft DirectMusic Remote Code Execution Vulnerability

LOW 38

Microsoft DirectMusic Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00805 Published 2023-10-10 Fixed in 10.0.17763.4974, 10.0.20348.2031 +9 CWE-94

TI-2023-18426 CVE-2023-36598 · GHSA-m3wv-72v2-v6f6

Microsoft WDAC ODBC Driver Remote Code Execution Vulnerability

LOW 38

Microsoft WDAC ODBC Driver Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00814 Published 2023-10-10 Fixed in 10.0.17763.4974, 10.0.20348.2031 +10 CWE-122

TI-2023-18423 CVE-2023-36593 · GHSA-59c6-46qg-fj99

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

LOW 38

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00822 Published 2023-10-10 Fixed in 10.0.17763.4974, 10.0.20348.2031 +10 CWE-190

TI-2023-18418 CVE-2023-36585 · GHSA-9h72-46q7-mr26

Windows upnphost.dll Denial of Service Vulnerability

LOW 38

Windows upnphost.dll Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02604 Published 2023-10-10 Fixed in 10.0.17763.4974, 10.0.20348.2031 +10 CWE-20

TI-2023-18293 CVE-2023-36436 · GHSA-8m65-6gr7-mrvf

Windows MSHTML Platform Remote Code Execution Vulnerability

LOW 38

Windows MSHTML Platform Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00849 Published 2023-10-10 Fixed in 10.0.17763.4974, 10.0.20348.2031 +9

TI-2023-18514 CVE-2023-36701 · GHSA-5q66-9mc9-28r5

Microsoft Resilient File System (ReFS) Elevation of Privilege Vulnerability

LOW 37

Microsoft Resilient File System (ReFS) Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00576 Published 2023-10-10 Fixed in 10.0.17763.4974, 10.0.20348.2031 +8 CWE-125

TI-2023-18391 CVE-2023-36557 · GHSA-8h98-mv3j-75c6

PrintHTML API Remote Code Execution Vulnerability

LOW 37

PrintHTML API Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00801 Published 2023-10-10 Fixed in 10.0.22621.2428, 10.0.19045.3570 +6

TI-2023-22171 CVE-2023-41766 · GHSA-7f38-v98x-v25m

Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability

LOW 36

Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00819 Published 2023-10-10 Fixed in 10.0.17763.4974, 10.0.20348.2031 +10 CWE-426

TI-2023-18524 CVE-2023-36712 · GHSA-45q3-4wmv-wpgr

Windows Kernel Elevation of Privilege Vulnerability

LOW 36

Windows Kernel Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00814 Published 2023-10-10 Fixed in 10.0.17763.4974, 10.0.20348.2031 +10

TI-2023-18422 CVE-2023-36592 · GHSA-9579-5vrc-wr3m

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

LOW 36

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.3 Local Low privileges User interaction EPSS 0.00814 Published 2023-10-10 Fixed in 10.0.17763.4974, 10.0.20348.2031 +10 CWE-94

TI-2023-18421 CVE-2023-36591 · GHSA-p86f-33vj-vqm9

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

LOW 36

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.3 Local Low privileges User interaction EPSS 0.00814 Published 2023-10-10 Fixed in 10.0.17763.4974, 10.0.20348.2031 +10 CWE-94

TI-2023-18420 CVE-2023-36590 · GHSA-wmhg-q3mp-9mvw

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

LOW 36

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.3 Local Low privileges User interaction EPSS 0.00822 Published 2023-10-10 Fixed in 10.0.17763.4974, 10.0.20348.2031 +10

TI-2023-18419 CVE-2023-36589 · GHSA-5j99-chp6-p2gh

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

LOW 36

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.3 Local Low privileges User interaction EPSS 0.00814 Published 2023-10-10 Fixed in 10.0.17763.4974, 10.0.20348.2031 +10 CWE-94

TI-2023-18416 CVE-2023-36583 · GHSA-vf8m-p3wg-hqwv

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

LOW 36

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.3 Local Low privileges User interaction EPSS 0.00822 Published 2023-10-10 Fixed in 10.0.17763.4974, 10.0.20348.2031 +10 CWE-416

TI-2023-18415 CVE-2023-36582 · GHSA-gr28-6h8g-ggvq

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

LOW 36

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.3 Local Low privileges User interaction EPSS 0.00822 Published 2023-10-10 Fixed in 10.0.17763.4974, 10.0.20348.2031 +10 CWE-190

TI-2023-18412 CVE-2023-36578 · GHSA-vrfh-cg8j-whm2

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

LOW 36

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.3 Local Low privileges User interaction EPSS 0.00822 Published 2023-10-10 Fixed in 10.0.17763.4974, 10.0.20348.2031 +10 CWE-843

TI-2023-18409 CVE-2023-36575 · GHSA-v4f6-358x-v44f

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

LOW 36

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.3 Local Low privileges User interaction EPSS 0.00814 Published 2023-10-10 Fixed in 10.0.17763.4974, 10.0.20348.2031 +10 CWE-94

TI-2023-18408 CVE-2023-36574 · GHSA-r5j7-pwg5-35p9

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

LOW 36

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.3 Local Low privileges User interaction EPSS 0.00814 Published 2023-10-10 Fixed in 10.0.17763.4974, 10.0.20348.2031 +10 CWE-94

TI-2023-18407 CVE-2023-36573 · GHSA-cq5q-99pr-fc9j

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

LOW 36

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.3 Local Low privileges User interaction EPSS 0.00814 Published 2023-10-10 Fixed in 10.0.17763.4974, 10.0.20348.2031 +10 CWE-94

TI-2023-18406 CVE-2023-36572 · GHSA-jqvh-93qp-x9fh

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

LOW 36

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.3 Local Low privileges User interaction EPSS 0.00814 Published 2023-10-10 Fixed in 10.0.17763.4974, 10.0.20348.2031 +10 CWE-94

TI-2023-18405 CVE-2023-36571 · GHSA-fcr8-rj58-cvpj

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

LOW 36

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.3 Local Low privileges User interaction EPSS 0.00814 Published 2023-10-10 Fixed in 10.0.17763.4974, 10.0.20348.2031 +10 CWE-94

TI-2023-18404 CVE-2023-36570 · GHSA-8xp7-rf4h-mfmg

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

LOW 36

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.3 Local Low privileges User interaction EPSS 0.00814 Published 2023-10-10 Fixed in 10.0.17763.4974, 10.0.20348.2031 +10 CWE-94

TI-2023-18579 CVE-2023-36776 · GHSA-7pcq-mhvw-4mgv

Win32k Elevation of Privilege Vulnerability

LOW 35

Win32k Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.02051 Published 2023-10-10 Fixed in 10.0.17763.4974, 10.0.20348.2031 +10 CWE-416

TI-2023-18541 CVE-2023-36732 · GHSA-2c6h-xvj7-f2xc

Win32k Elevation of Privilege Vulnerability

LOW 35

Win32k Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00634 Published 2023-10-10 Fixed in 10.0.17763.4974, 10.0.20348.2031 +10

TI-2023-18538 CVE-2023-36729 · GHSA-393w-2929-cxcg

Named Pipe File System Elevation of Privilege Vulnerability

LOW 35

Named Pipe File System Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00576 Published 2023-10-10 Fixed in 10.0.17763.4974, 10.0.20348.2031 +7 CWE-121

TI-2023-18535 CVE-2023-36726 · GHSA-2wmp-7qf6-49px

Windows Internet Key Exchange (IKE) Extension Elevation of Privilege Vulnerability

LOW 35

Windows Internet Key Exchange (IKE) Extension Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00576 Published 2023-10-10 Fixed in 10.0.17763.4974, 10.0.20348.2031 +10 CWE-416

TI-2023-18534 CVE-2023-36725 · GHSA-6rvq-8whp-rp5p

Windows Kernel Elevation of Privilege Vulnerability

LOW 35

Windows Kernel Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00503 Published 2023-10-10 Fixed in 10.0.17763.4974, 10.0.20348.2031 +4 CWE-284

TI-2023-18525 CVE-2023-36713 · GHSA-4vrv-8x2h-44vh

Windows Common Log File System Driver Information Disclosure Vulnerability

LOW 35

Windows Common Log File System Driver Information Disclosure Vulnerability

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.07332 Published 2023-10-10 Fixed in 10.0.17763.4974, 10.0.20348.2031 +10 CWE-908

TI-2023-18523 CVE-2023-36711 · GHSA-7w34-g63q-q826

Windows Runtime C++ Template Library Elevation of Privilege Vulnerability

LOW 35

Windows Runtime C++ Template Library Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00625 Published 2023-10-10 Fixed in 10.0.17763.4974, 10.0.20348.2031 +8 CWE-59

TI-2023-18429 CVE-2023-36605 · GHSA-c3vq-mmhq-xqf4

Windows Named Pipe Filesystem Elevation of Privilege Vulnerability

LOW 35

Windows Named Pipe Filesystem Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00482 Published 2023-10-10 Fixed in 10.0.17763.4974, 10.0.20348.2031 +4 CWE-416

TI-2023-18686 CVE-2023-36902 · GHSA-5356-67pr-8ffv

Windows Runtime Remote Code Execution Vulnerability

LOW 33

Windows Runtime Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.0 Local No auth User interaction EPSS 0.005 Published 2023-10-10 Fixed in 10.0.17763.4974, 10.0.20348.2031 +5 CWE-416

TI-2023-18398 CVE-2023-36564 · GHSA-fpvf-qrrj-g7c6

Windows Search Security Feature Bypass Vulnerability

LOW 32

Windows Search Security Feature Bypass Vulnerability

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01432 Published 2023-10-10 Fixed in 10.0.17763.4974, 10.0.20348.2031 +10

TI-2023-18530 CVE-2023-36721 · GHSA-2793-qrcg-qwq3

Windows Error Reporting Service Elevation of Privilege Vulnerability

LOW 31

Windows Error Reporting Service Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.0041 Published 2023-10-10 Fixed in 10.0.17763.4974, 10.0.20348.2031 +4 CWE-269

TI-2023-18526 CVE-2023-36717 · GHSA-xm74-xg8p-3q48

Windows Virtual Trusted Platform Module Denial of Service Vulnerability

LOW 30

Windows Virtual Trusted Platform Module Denial of Service Vulnerability

CVSS 3.1MEDIUM 6.5 Local Low privileges No interaction EPSS 0.00702 Published 2023-10-10 Fixed in 10.0.17763.4974, 10.0.20348.2031 +6

TI-2023-18533 CVE-2023-36724 · GHSA-79p6-hc5c-r998

Windows Power Management Service Information Disclosure Vulnerability

LOW 26

Windows Power Management Service Information Disclosure Vulnerability

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00537 Published 2023-10-10 Fixed in 10.0.17763.4974, 10.0.20348.2031 +9 CWE-287

TI-2023-18410 CVE-2023-36576 · GHSA-hjhh-2xr7-hmvp

Windows Kernel Information Disclosure Vulnerability

LOW 26

Windows Kernel Information Disclosure Vulnerability

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00869 Published 2023-10-10 Fixed in 10.0.17763.4974, 10.0.20348.2031 +5 CWE-190

TI-2023-18531 CVE-2023-36722 · GHSA-jq3c-jwqq-c2qg

Active Directory Domain Services Information Disclosure Vulnerability

LOW 23

Active Directory Domain Services Information Disclosure Vulnerability

CVSS 3.1MEDIUM 4.4 Network High privileges No interaction EPSS 0.01373 Published 2023-10-10 Fixed in 10.0.17763.4974, 10.0.20348.2031 +10 CWE-284

TI-2023-18513 CVE-2023-36698 · GHSA-8v3h-cxg7-7jhv

Windows Kernel Security Feature Bypass Vulnerability

LOW 21

Windows Kernel Security Feature Bypass Vulnerability

CVSS 3.1MEDIUM 4.4 Local Low privileges No interaction EPSS 0.00467 Published 2023-10-10 Fixed in 10.0.17763.4974, 10.0.20348.2031 +4 CWE-362